CVE-2012-0774

Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to execute arbitrary code via a crafted TrueType font

published April 10, 2012

CVSS
—
EPSS
15%
Percentile
96.8
In the wild
Unconfirmed
What it is

⚠️ An integer overflow in Adobe Reader could let a crafty attacker execute arbitrary code just by sending you a specially crafted TrueType font! 📜 Think of it like a restaurant where a cook is allowed to serve meals based on a recipe card. If they don’t carefully check the ingredients, a wrong substitution could result in a dish that’s not just inedible but downright dangerous! 🍽️ If an attacker successfully exploits this vulnerability, they could potentially run any code on your system—imagine giving someone access to your kitchen and letting them whip up whatever they desire! This could lead to data loss or even a total system compromise, which is absolutely devastating.

Put simply

Think of it like a restaurant where a cook is allowed to serve meals based on a recipe card. If they don’t carefully check the ingredients, a wrong substitution could result in a dish that’s not just inedible but downright dangerous! 🍽️ This vulnerability arises from an integer overflow in Adobe Reader and Acrobat 9.x and 10.x, allowing attackers to bypass normal safeguards when processing a crafted TrueType font, potentially leading to code execution.

What to do

If an attacker successfully exploits this vulnerability, they could potentially run any code on your system—imagine giving someone access to your kitchen and letting them whip up whatever they desire! This could lead to data loss or even a total system compromise, which is absolutely devastating. Update Adobe Reader and Acrobat to versions 9.5.1 or later, and 10.1.3 or later, to close this vulnerability. It's crucial to keep all software up to date to protect against such sneaky exploits! You've got this! Just follow these steps to strengthen your defenses and keep your system secure. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.15485 · 96.8th percentile
Published
2012-04-10T23:00Z
EPSS history
Timeline
  • 10 APR 23:00Z
    Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.1 and 10.x before 10.1.3 allows attackers to execute arbitrary code via a crafted TrueType font
    cvelistv5